WordPress ACF for WooCommerce Product Plugin <= 1.8.1 is vulnerable to Cross Site Scripting (XSS)

Software ACF for WooCommerce Product Type Plugin Vulnerable versions = 1.8.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 77163d30db66 Credits Rafie Muhammad...

WordPress Turbo Widgets Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Turbo Widgets Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 87b08b4531c7 Credits Rafie Muhammad Patchstack Required...

WordPress Modern Designs for Gravity Forms Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Modern Designs for Gravity Forms Type Plugin Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4662a347c105 Credits Rafie Muhammad...

WordPress Cryptocurrency Portfolio Tracker Plugin <= 0.0.17 is vulnerable to Cross Site Scripting (XSS)

Software Cryptocurrency Portfolio Tracker Type Plugin Vulnerable versions = 0.0.17 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 21f6f43dfd2a Credits Rafie Muhammad...

WordPress Local Delivery Drivers for WooCommerce Plugin < 1.9.0 is vulnerable to Cross Site Scripting (XSS)

Software Local Delivery Drivers for WooCommerce Type Plugin Vulnerable versions 1.9.0 Fixed in 1.9.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 43f3ba1f28bd Credits Rafie...

WordPress Five-Star Ratings Shortcode Plugin < 1.2.48 is vulnerable to Cross Site Scripting (XSS)

Software Five-Star Ratings Shortcode Type Plugin Vulnerable versions 1.2.48 Fixed in 1.2.48 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ed6e5abc9527 Credits Rafie Muhammad...

WordPress Cryptocurrency Product for WooCommerce Plugin < 3.16.10 is vulnerable to Cross Site Scripting (XSS)

Software Cryptocurrency Product for WooCommerce Type Plugin Vulnerable versions 3.16.10 Fixed in 3.16.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 10effe065692 Credits Rafie...

WordPress WooCommerce to Zoho CRM Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce to Zoho CRM Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fd362fec5d18 Credits Rafie Muhammad Patchstac...

WordPress Easy Courses Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Easy Courses Type Plugin Vulnerable versions = 1.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e3ad0b50099b Credits Rafie Muhammad Patchstack Required...

WordPress Widgets for SiteOrigin Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)

Software Widgets for SiteOrigin Type Plugin Vulnerable versions = 1.4.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 717d2bce0621 Credits Rafie Muhammad Patchstack...

WordPress Product Image Watermark for Woo Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Product Image Watermark for Woo Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 75275bbab7e3 Credits Rafie Muhammad...

WordPress Reset Course Progress For LearnDash Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Reset Course Progress For LearnDash Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a19631e39834 Credits Rafie Muhammad...

WordPress Campation PostOffice – Send Email Spam-free on HighSpeed without WP SMTP plugin – WordPress 6 ready! Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)

Software Campation PostOffice – Send Email Spam-free on HighSpeed without WP SMTP plugin – WordPress 6 ready! Type Plugin Vulnerable versions = 1.5.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1...

WordPress Master Accordion ( Former WP Awesome FAQ Plugin ) Plugin <= 4.1.9 is vulnerable to Cross Site Scripting (XSS)

Software Master Accordion Former WP Awesome FAQ Plugin Type Plugin Vulnerable versions = 4.1.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f4070e91cc4d Credits Rafi...

WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Plugin <= 3.7.0 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Type Plugin Vulnerable versions = 3.7.0 Fixed in 3.7.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim...

WordPress Italian VAT Kit for WooCommerce Plugin <= 1.3.34 is vulnerable to Cross Site Scripting (XSS)

Software Italian VAT Kit for WooCommerce Type Plugin Vulnerable versions = 1.3.34 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 97bced365725 Credits Rafie Muhammad...

WordPress Simplelender Plugin <= 1.3.23 is vulnerable to Cross Site Scripting (XSS)

Software Simplelender Type Plugin Vulnerable versions = 1.3.23 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 56ad2fad8624 Credits Rafie Muhammad Patchstack Required...

WordPress WordPress Google Translate Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Google Translate Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 51f43d98ec48 Credits Rafie Muhammad Patchstack...

WordPress Ultimeter Plugin < 2.8.3 is vulnerable to Cross Site Scripting (XSS)

Software Ultimeter Type Plugin Vulnerable versions 2.8.3 Fixed in 2.8.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c6dbf05fd248 Credits Rafie Muhammad Patchstack Required...

WordPress Guest Author Affiliate Plugin < 1.1.6 is vulnerable to Cross Site Scripting (XSS)

Software Guest Author Affiliate Type Plugin Vulnerable versions 1.1.6 Fixed in 1.1.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5c442c4c1bd8 Credits Rafie Muhammad Patchstack...